Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-x3gm-fcg7-59j9

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

VeryNginx 0.3.3 allows remote attackers to bypass the Web Application Firewall feature because there is no error handler (for get_uri_args or get_post_args) to block the API misuse described in CVE-2018-9230.

VeryNginx 0.3.3 allows remote attackers to bypass the Web Application Firewall feature because there is no error handler (for get_uri_args or get_post_args) to block the API misuse described in CVE-2018-9230.

EPSS

Процентиль: 65%
0.00481
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-755

Связанные уязвимости

CVSS3: 9.8
nvd
около 7 лет назад

VeryNginx 0.3.3 allows remote attackers to bypass the Web Application Firewall feature because there is no error handler (for get_uri_args or get_post_args) to block the API misuse described in CVE-2018-9230.

EPSS

Процентиль: 65%
0.00481
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-755